Ransom

Should I remove “Generic.Ransom.AIT.Ouroboros.C50292DF”?

Malware Removal

The Generic.Ransom.AIT.Ouroboros.C50292DF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.AIT.Ouroboros.C50292DF virus can do?

  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Modifies boot configuration settings
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.AIT.Ouroboros.C50292DF?


File Info:

crc32: 26FCC880
md5: c01cda385e2f5b28c73a1049fa877ac1
name: C01CDA385E2F5B28C73A1049FA877AC1.mlw
sha1: 713de88da850e8c30abb0fed3ab2e64aaf0f1473
sha256: 0ec9e14919191fd7eef9fc4076296bbeb599bbbf3b1f208d7192dcbeb20ead4f
sha512: 085705ea4da5bc9bc556c65a0d62f90eec6243aed2d66ad73cec0a3b4311a93fdc51a3f885da7afd50c9c98e28b878788dc6175bf34fef4d3ba5c4506ab03bbd
ssdeep: 12288:uCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBgaga5qqAfwG:uCdxte/80jYLT3U1jfsWaX5ofwGdFQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Generic.Ransom.AIT.Ouroboros.C50292DF also known as:

BkavW32.AIDetect.malware1
DrWebTrojan.Encoder.24576
CynetMalicious (score: 85)
CAT-QuickHealRansom.Autoit.CryptoWire.A
McAfeeArtemis!C01CDA385E2F
CylanceUnsafe
SangforRansom.Win32.CryptoWire.MSR
CrowdStrikewin/malicious_confidence_80% (D)
Cybereasonmalicious.85e2f5
ESET-NOD32Win32/Filecoder.NHN
APEXMalicious
AvastAutoIt:Ransom-K [Trj]
KasperskyTrojan-Ransom.Win32.Gen.fla
BitDefenderGeneric.Ransom.AIT.Ouroboros.C50292DF
NANO-AntivirusTrojan.Win32.AD.esykef
MicroWorld-eScanGeneric.Ransom.AIT.Ouroboros.C50292DF
TencentWin32.Trojan.Raas.Auto
Ad-AwareGeneric.Ransom.AIT.Ouroboros.C50292DF
SophosTroj/CrWire-A
ComodoMalware@#1mkzxiol2jfb6
BitDefenderThetaAI:Packer.C658345116
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Cryptoit-1
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.th
FireEyeGeneric.Ransom.AIT.Ouroboros.C50292DF
EmsisoftGeneric.Ransom.AIT.Ouroboros.C50292DF (B)
AviraHEUR/AGEN.1100014
MicrosoftRansom:Win32/Genasom
AegisLabTrojan.Win32.Generic.4!e
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGeneric.Ransom.AIT.Ouroboros.C50292DF (2x)
MAXmalware (ai score=99)
PandaTrj/CI.A
TrendMicro-HouseCallMal_Cryptoit-1
RisingRansom.CryptoWire/Autoit!1.C3A2 (CLASSIC)
FortinetAutoIt/Ouroboros.A!tr.ransom
AVGAutoIt:Ransom-K [Trj]
Paloaltogeneric.ml
Qihoo-360Generic/Trojan.Ransom.faa

How to remove Generic.Ransom.AIT.Ouroboros.C50292DF?

Generic.Ransom.AIT.Ouroboros.C50292DF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment